sukorejo.com

Issued by R3

About this certificate

This digital certificate with serial number 03:68:62:11:9d:ec:d7:7b:27:fc:5b:c7:f2:c3:fc:ef:5d:6f was issued on by Let's Encrypt.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sukorejo.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:68:62:11:9d:ec:d7:7b:27:fc:5b:c7:f2:c3:fc:ef:5d:6f
Serial Number (int): 296856579770794699278170443671798455164271
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 52:b8:30:b4:f9:fd:3c:d7:23:19:62:19:e5:bd:b1:f5:90:6a:8e:7b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b0:14:f2:b3:82:4d:21:17:9e:94:33:78:d3:ff:8e:72:02:f1:f4:fe
Fingerprint (sha256): 62:da:44:07:bd:f6:26:26:88:aa:39:b3:8c:b0:8e:63:30:eb:b8:eb:60:94:5d:4b:e3:aa:6f:a7:33:f8:a0:75

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sukorejo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sukorejo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sukorejo.com
sukorejo.com

Other certificates including the domain name sukorejo.com

(limited to 100 certificates)
jakarta.iksass.sukorejo.com
pragaan.iksass.sukorejo.com
sukorejo.com
bali.iksass.sukorejo.com
sukorejo.com
sukorejo.com
banyuwangi.iksass.sukorejo.com
iksass.sukorejo.com
banyuwangi.iksass.sukorejo.com
haul.sukorejo.com
surabaya.iksass.sukorejo.com
banyuwangi.iksass.sukorejo.com
surabaya.iksass.sukorejo.com
sumenep.iksass.sukorejo.com
sukorejo.com
sumenep.iksass.sukorejo.com
iksass.sukorejo.com
sukorejo.com
jember.iksass.sukorejo.com
pragaan.iksass.sukorejo.com
iksass.sukorejo.com
mahad-aly.sukorejo.com
bali.iksass.sukorejo.com
mahad-aly.sukorejo.com
jember.iksass.sukorejo.com
*.sukorejo.com
pragaan.iksass.sukorejo.com
jakarta.iksass.sukorejo.com
*.sukorejo.com
iksass.sukorejo.com
mahad-aly.sukorejo.com
situbondo.iksass.sukorejo.com
p2s2sukorejo.meulabohmart.com
mahad-aly.sukorejo.com
sukorejo.com
bali.iksass.sukorejo.com
bali.iksass.sukorejo.com
situbondo.iksass.sukorejo.com
jember.iksass.sukorejo.com
jakarta.iksass.sukorejo.com
surabaya.iksass.sukorejo.com
sumenep.iksass.sukorejo.com
sukorejo.com
situbondo.iksass.sukorejo.com
p2s2sukorejo.meulabohmart.com

Certificate

The complete raw certificate details for sukorejo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuu8rRVQlKLqjZhemiQ8
hFQDdUL+93jWWNJrhQe4NUl/Z+9pXfu+EsL8JFCKl9kpPKKbcnn99zSzP4XXcXAO
LctS8c9doO4a5S8A4RRJL/fW/Z9KGaNvVECbBKsaGYH+cDX/kHVIup4clm9SzkI6
gKwNhIjBZvDRBMv4rTqoCMMPYROUlLF4s0/5cMT2IAW40aPcQ/86uocRm8LeCZO9
34mod0G7szarfkdcXBDQ+DDMMJTFgE0CaPWaHrFPp2Zein2sf01/R7vwBds3owMR
NUVySwiQhZJvO9IKGfrbeahWjDt1INDigAT5HZQY+4AGvDrEjSLZtur3Ze/bQYnL
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 296856579770794699278170443671798455164271
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 14:26:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 14:26:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sukorejo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24101524198718201684340829011050841129422274683773193441992417138280984565834077411435729251322768933703364903090308103206549695052934760987409165528709035182357990387791946253162189449598727174687040834307314956633781339696506541580103329207529893589436923639562079136367337478625433842889242171615305597193797759205116285198313993045893272267343592283588067552366439939575204877808829459959483172305110956074304372534803028532007852702006612321880796462059869322519610403341497742700011836244269011397106208508935039431983934403670247245787746355296617830040901400209131304079785233716195611469503903384022920317863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52b830b4f9fd3cd723196219e5bdb1f5906a8e7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sukorejo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sukorejo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d5afa301100000403004830460221009d4f22e7dc1d31eba06184d84cc73eaff160f07414ee332f8e6f1b7a06dced75022100ab540ca35d742e6aa64ef91966816f189a9266a14bd3ff71fbe9d26c527f1b980077003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018d5afa301e0000040300483046022100c134a3f2998b9785f2db25f08a6fecf04bf8ed444439a5a6980144264fca645a022100ba0dcefb80af24ad19b7593bff0c027b88d0bf270b1411b14f3c28b9d1cada3d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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